Loading...
Boston, MA – April 29, 2025
Black Kite, the leader in third-party cyber risk intelligence, today introduced Vulnerability Intelligence Briefs (VIB). This groundbreaking solution goes beyond cataloging Common Vulnerabilities and Exposures (CVEs) by providing visibility into third-party risks, enabling security professionals to discover a vulnerability’s severity, exploitability, and exposure.
An organization’s third-party vulnerabilities are its greatest risk exposure, exacerbating challenges faced by security teams that frequently rely on traditional vulnerability management solutions focused on internal systems. As a result, they are operating with a critical blind spot in the security posture of vendors and partners. This gap creates a significant risk, as a single unpatched vulnerability in a third-party system can trigger a cascading impact across an entire organization.
“As more organizations turn to third-party vendors, open-source components, and cloud services, in today’s environment, they cannot afford to rely on a traditional vulnerability management mindset,” said Chuck Schauber, Chief Product Officer at Black Kite. “Third-party risks are increasing, with vulnerabilities fast becoming a third-party risk management issue. With the release of Black Kite VIB, we are providing a solution that has the actionable intelligence and tools needed so that organizations can move from reactive patching to a strategic ecosystem defense. Without doubt, this launch represents a new era where managing vulnerability risks in third-parties is not only possible but now is a critical part of third-party cyber risk management.”
According to Black Kite’s recently released 2025 Supply Chain Vulnerability Report: Navigating a New Era of Managing Vulnerability Risk in Third Parties, 2024 marked a sharp increase in published vulnerabilities, with over 40,000 CVEs disclosed, representing a 38% year-over-year increase. Many of these exploited vulnerabilities were found in widely used third-party software rather than internally developed applications, with high-profile vulnerabilities in MOVEit, Fortra GoAnywhere, and Ivanti products demonstrating how supply chain risks can propagate. These findings further validate that vulnerability management must evolve beyond internal patching strategies.
With VIB, Black Kite is revealing vulnerabilities across the supply chain so that organizations can assess the associated risks and their impact, prioritize the vulnerabilities that need to be mitigated, and engage with their vendors to strengthen their security and the security of the entire supply chain.
Key benefits and features include:
Resources:
Black Kite gives organizations a comprehensive, real-time view into cyber ecosystem risk so they can make informed risk decisions and improve business resilience while continuously monitoring more vendors, partners, and suppliers in an ever-changing digital landscape. Through an automated process, and a combination of threat, business and risk information, Black Kite provides cyber risk intelligence that goes beyond a simple risk score or rating. Black Kite serves more than 3,000 customers in a wide range of industries and has received numerous industry awards and recognition from customers.
Learn more at www.blackkite.com, or on the Black Kite blog.
Media Contact:
Michelle Kearney
Hi-Touch PR
443-857-9468